df12a001843413b18079a5b7129dd6a22fe21bbfd9cba8f749110b6ba7ba22b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df12a001843413b18079a5b7129dd6a22fe21bbfd9cba8f749110b6ba7ba22b8
Size

52KB
MD5

a4d3b7180f9ac1b0906a8a23ede6b431
SHA1

e8feefbf5ef2b7eab29fa6bb2a7710cc9ce89baa
SHA256

df12a001843413b18079a5b7129dd6a22fe21bbfd9cba8f749110b6ba7ba22b8
SHA512

1911cb9c8c3a5c774832b19877dab044806a1b9630c25aabbd550fb3fc2f84ef82c0707d1c98b94937ca26d2f73b8339060793b73cf9feef817d15f67436df04
SSDEEP

768:2PitRNEGtXXnZ/JudBDtcUtdVCxVOS3fNGqSatlATb:RF3wDtkx3PRe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df12a001843413b18079a5b7129dd6a22fe21bbfd9cba8f749110b6ba7ba22b8

Files

df12a001843413b18079a5b7129dd6a22fe21bbfd9cba8f749110b6ba7ba22b8
.exe windows:5 windows x86 arch:x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ